IT Security Engineer - KS - Principle Choice Solutions LLC

Date:	January 30th 2023		Position:	IT Security Engineer
Location:	Remote (NE,OK,IA,TX,GA,AL,KS,LA,MI)		Pay Status:	Exempt (Salaried)

PRINCIPLE CHOICE SOLUTIONS
IT Security Engineer

POSITION PURPOSE
The IT Security Engineer is responsible for securing Principle Choice Solutions digital assets.  They design and implement security protocols, monitor the organization for vulnerabilities, and develop countermeasures to prevent future incidents.  The IT Security Engineer will be responsible for training employees on security best practices and advise management on investments to safeguard the company’s Cloud SaaS Infrastructure.  The IT Security Engineer will be responsible for improving the security posture of the Principle Choice Solution organization as it relates to our cybersecurity framework policies and procedures and proactively communicate and implement any improvement items to the Director of IT.

ORGANIZATION
This position reports to the Director of IT.  This position does not have supervisory responsibilities.

ESSENTIAL FUNCTIONS

• Develop, execute, and track the performance of security measures to protect information within the Cloud SaaS Infrastructure, network infrastructure, and computer systems.
• Design computer security strategy and engineer comprehensive cybersecurity architecture.
• Provide documentation and lead security discussions as it relates to external 3rd party audits.
• Lead compliance assessments around NIST 800-171 or 800-053 control sets.
• Identify, define, and document system security requirements and recommend solutions to management.
• Monitor systems for irregular behavior and set up preventive measures, utilizing tools within the Microsoft stack, such as Defender XDR, Sentinel, Purvue,, etc.
• Proactively own security improvements within the organization, from idea to implementation, including communication and training support to the business.
• Proactively work with leadership on new procurements by utilizing organizational security controls and assessments today and provide recommendations to solve business needs and still maintain a strong security posture. 
• Provide regular metrics and updates to leadership on our security posture within our organization.
• Full project management experience from the planning to delivery stage of new security controls and/or software, plus improvements to our company’s information security plan.
• Maintain an up-to-date knowledge of security vulnerabilities, technologies, and risks that are new to the industry.
• Provide On-Call support as necessary.
• All other duties as assigned.

KNOWLEDGE & EXPERIENCE

• Strong interpersonal and communication skills with proven ability to communicate both orally and written.
• Thorough understanding of computer-related security systems including firewalls, encryption, password protection, authorization, and authentication best practices.
• In Depth knowledge of Microsoft Defender, Purvue, Sentinel, Microsoft 365 Security, and Entra ID.
• Thorough understanding and practical application, including improvements to secure web gateway products.
• Ability to identify and assess risks, develop strategies to proactively mitigate risk in the organization.
• Understanding and practical application of security standards such as NIST 800-171, 800-053, and HIPAA.
• Demonstrated problem-solving and analytical skills.
• Proficient in providing analytical data to leadership in an understandable format.
• Minimum 3 years of prior experience in a security role.
• CISSP or CISM highly recommended for this role.

MACHINES & EQUIPMENT
The incumbent must be able to effectively operate the current computer system, cloud architecture, telephone system, and other office machines such as copier and fax machines.

PHYSICAL REQUIREMENTS
Must be able to lift and carry up to 20 pounds.  Must be able to talk, listen, and speak clearly on the telephone.

WORKING CONDITIONS
The incumbent works in an office environment that is not substantially exposed to adverse environmental conditions such as heat, cold, or extreme noise.  Routine periods of being on the phone utilizing a headset, sitting and data keying are required.  Periodic times working at the office site may be required.

Security and privacy training will be provided as part of this role to protect the confidentiality, integrity, and availability of PCS’ associate and customer data.

The above statements are intended to describe the general nature of work being performed by people assigned to this classification.  They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.